b97a7fce67b54a7f24c1b4a9b9c2e07d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b97a7fce67b54a7f24c1b4a9b9c2e07d_JaffaCakes118
Size

194KB
MD5

b97a7fce67b54a7f24c1b4a9b9c2e07d
SHA1

129e0edc31d6144859131a9a05b52d59e0609bab
SHA256

b9ddbd562da6d131b1e70f7fe99dfb232083367c938646ddb240753357aca303
SHA512

9e5ab6b68ab528368cf5ad9c78598d9c9d96dbd96c1a1a7529205f3126a96185f411017414ca00e86e34ae8711da4a3c68f09e38d25e757d95477e2dad325bbd
SSDEEP

3072:7EZ7+LzO1T1jVYTbmyds+N4zwox+2P71+1eDPJvcKUYPjq+D7s:72621BVYLKG+LxNP71ce91lPuF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b97a7fce67b54a7f24c1b4a9b9c2e07d_JaffaCakes118

Files

b97a7fce67b54a7f24c1b4a9b9c2e07d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

215083a45fe1a2a3760d5acbd6821d20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 177KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE